https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:09:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-16252 bdu:2025-16252 https://cve.radiocsirt.org/vuln/bdu:2025-16252 https://cve.radiocsirt.org/vuln/euvd-2026-254877 EUVD-2026-254877 https://cve.radiocsirt.org/vuln/euvd-2026-254877 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1826 <p>IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.</p> <p>IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-1826 https://cve.radiocsirt.org/vuln/ghsa-vf5g-mrcg-m69p <p>IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.</p> <p>IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.</p> https://cve.radiocsirt.org/vuln/ghsa-vf5g-mrcg-m69p https://cve.radiocsirt.org/vuln/va-25-297-01 <p>IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security. Fixed in 7.0.2 iFix036, 7.0.3 iFix019, and 7.1.0 iFix005. IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security. Fixed in 7.0.2 iFix036, 7.0.3 iFix019, and 7.1.0 iFix005. IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data. Fixed in 7.0.2 iFix036, 7.0.3 iFix019, and 7.1.0 iFix005. IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion. Fixed in 7.0.2 iFix036, 7.0.3 iFix019, and 7.1.0 iFix005. IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Fixed in 7.0.2 iFix035, 7.0.3 iFix017, and 7.1.0 iFix005. IBM…</p> <p>IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security. Fixed in 7.0.2 iFix036, 7.0.3 iFix019, and 7.1.0 iFix005. IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security. Fixed in 7.0.2 iFix036, 7.0.3 iFix019, and 7.1.0 iFix005. IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data. Fixed in 7.0.2 iFix036, 7.0.3 iFix019, and 7.1.0 iFix005. IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion. Fixed in 7.0.2 iFix036, 7.0.3 iFix019, and 7.1.0 iFix005. IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Fixed in 7.0.2 iFix035, 7.0.3 iFix017, and 7.1.0 iFix005. IBM…</p> https://cve.radiocsirt.org/vuln/va-25-297-01